May B-Star lawfully conduct this research using Carl’s medical data?
Singapore’s PDPA research exception can allow an organisation to use personal data without consent for a research purpose when the statutory conditions are met, including that there is a clear public benefit to using the data, the research requires identifiable data, its results will not be used to make a decision affecting the individual, and published results do not identify the individual. A former employee’s departure does not itself bar the exception, while consent to collect employment-related data does not by itself authorise a different research use.
Community Discussion